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EXAMINER'S AMENDMENT 



Response to Appeal Brief 



1 . Applicant's arguments in the Appeal Brief filed on 10/24/08 with respect to 
claims 1 1-28 have been full considered and are persuasive. See below for 
examiners reasons for allowance. Hence, the 1 03(a) rejections of claims 1 1 -28 
have been withdrawn. 

2. An examiner's amendment to the record appears below. Should the 
changes and/or additions be unacceptable to applicant, an amendment may be 
filed as provided by 37 CFR 1 .312. To ensure consideration of such an 
amendment, it MUST be submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone 
interview with Stephen J. Walder, Jr. on 6/4/08. 

The application has been amended as follows: 
In the claims: 
a. Claim 17: 



therefore - computer storage medium — ; 



i. 



Line/, delete "in a computer readable medium" insert 




ii. LinesjM, delete "the computer program product" insert 



therefore -which when executed—; 
iii. Line 6, delete "means for"; 
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iv. Line/, delete "means responsive" insert therefore - 

responding-; 

•J 

v. Line p , delete "means for". 

Allowable Subject Matter 

1. Claims 11-28 are allowed. 

2. The following is an examiner's statement of reasons for allowance: 
applicant's claimed invention discloses a method and system for enabling an 
untrusted program to access a native operating system resource. The prior art 
does not disclose having a login service listening on a named pipe for login 
requests; receiving a login request on the named pipe where the request 
includes an identifier for a uniquely-named response pipe; wherein the named 
pipe and the uniquely-named response pipe are not similar; returning a native 
operating system identifier; using the native operating system identifier to create 
a credential object and using the credential object to login to the native operating 
system. In addition, the prior art does not disclose having a login service 
listening on a named pipe for login requests; receiving a login request on the 
named pipe where the request includes an identifier for a uniquely-named 
response pipe; wherein the named pipe and the uniquely-named response pipe 
are not similar; in response to creating the named response pipe by the program, 
acting as a named-pipe server on the named response pipe by the program; 
using a token generated during the login operation to create a credential object 
and using the credential object to login to the native operating system. 



